$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa File: E4EB20D84C0C11F08C577458C4F9AE02.roa (raw, json) Hash identifier: Qf5L+mNsX+V8bkt134rBgHCFrP6UDf74754rvyVGxm8= Subject key identifier: 57:8E:7B:CF:77:93:47:E9:6A:9D:57:E4:79:3A:FC:B1:81:9B:EE:8F Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 040E Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa Signing time: Thu 29 Jan 2026 00:20:25 +0000 ROA not before: Thu 29 Jan 2026 00:20:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135352 IP address blocks: 43.225.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 23:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: Jan 29 00:20:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697aa7c9-cf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:af:ec:16:0a:ce:6d:9e:5c:65:a6:ee:f3: 6e:26:dc:ac:13:2a:c4:9c:3a:f2:9c:95:14:33:91: 20:6a:e6:37:a8:f5:85:ab:7d:bd:fe:07:78:fa:88: c5:84:07:33:44:ea:09:b6:2e:3b:fe:21:34:7e:9d: 92:52:15:ba:dd:80:05:f9:fc:55:3a:21:81:8d:f1: f8:31:a6:c5:ff:57:38:07:1b:5a:78:20:06:e7:a3: bf:16:0b:7a:44:9d:d9:a5:aa:ac:0b:2b:a6:f6:2e: bb:8b:99:de:56:34:e0:8d:af:50:c8:28:54:fc:5f: fa:bb:b1:2e:63:fd:cb:74:cd:30:a1:bd:ce:15:60: 67:e8:43:44:a9:48:70:2a:75:74:ca:4f:42:75:14: cd:5d:92:68:13:3c:b0:94:90:cf:75:76:c4:58:b6: 96:52:84:8c:db:ff:f3:10:43:c6:a3:97:7a:bb:0f: 95:76:36:49:e9:7d:15:cd:40:59:25:f2:e6:8e:8f: 4f:ef:c9:54:cc:63:29:44:0d:86:7c:cf:e8:d2:f0: 89:29:90:26:01:79:21:17:d8:85:75:c3:ad:8e:cb: 9b:a9:32:96:65:1b:1a:c9:62:73:0b:9a:69:11:e6: b8:13:ee:33:e0:8f:fd:a7:b8:85:c7:99:bb:9e:3a: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8E:7B:CF:77:93:47:E9:6A:9D:57:E4:79:3A:FC:B1:81:9B:EE:8F X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.60.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:a8:a5:43:5c:e3:e5:5f:67:3d:66:74:fc:9d:66:42:b4:76: ef:2e:1b:de:0b:11:d3:ea:b3:d8:1c:98:44:74:33:40:81:49: d7:38:7c:0c:ed:98:6e:99:e2:8b:b0:16:3b:4f:d6:f9:e3:c8: d3:4d:5b:37:47:8c:00:93:16:e9:8f:42:a0:87:27:e0:43:f2: 70:40:44:8a:b9:b8:04:ec:4d:e1:99:d1:67:07:5a:e4:d0:72: 4f:cb:a6:ef:d8:31:a8:89:21:47:fa:fc:22:02:e2:c5:9d:8c: f0:7d:79:23:a4:90:9a:4f:eb:d7:ef:ce:72:bb:74:a1:2f:cb: da:ff:f9:94:3c:24:e4:09:81:b8:94:83:54:f4:3b:ee:ad:f4: 36:6e:8d:8d:a5:54:92:24:99:46:76:3e:f9:f1:5c:74:b3:11: 38:05:59:57:a0:50:08:d8:90:32:b6:85:b3:1a:13:ea:a4:cf: 53:2d:1a:80:82:5d:be:27:e6:8a:68:10:82:a2:20:eb:1b:f1: 9f:3b:64:74:70:23:0e:7e:87:73:31:21:ec:e5:29:ac:1d:4a: db:13:37:98:42:6d:41:c6:12:c5:3d:21:4f:5e:65:d9:cc:17: 03:e2:9a:d3:c9:f4:c5:75:9b:1c:30:07:c2:7a:c1:d3:34:b3: d1:3b:22:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjYwMTI5MDAyMDI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhYTdjOS1jZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslGv7BYKzm2eXGWm7vNuJtysEyrEnDrynJUUM5EgauY3qPWFq329/gd4+ojF hAczROoJti47/iE0fp2SUhW63YAF+fxVOiGBjfH4MabF/1c4BxtaeCAG56O/Fgt6 RJ3ZpaqsCyum9i67i5neVjTgja9QyChU/F/6u7EuY/3LdM0wob3OFWBn6ENEqUhw KnV0yk9CdRTNXZJoEzywlJDPdXbEWLaWUoSM2//zEEPGo5d6uw+VdjZJ6X0VzUBZ JfLmjo9P78lUzGMpRA2GfM/o0vCJKZAmAXkhF9iFdcOtjsubqTKWZRsayWJzC5pp Eea4E+4z4I/9p7iFx5m7njpwYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFeOe893 k0fpap1X5Hk6/LGBm+6PMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc1Q0MvMUVBMzQzRTJBRkUzMTFFQ0EyQ0IwNjZEQzRGOUFFMDIvRTRFQjIwRDg0 QzBDMTFGMDhDNTc3NDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4TwwDQYJKoZIhvcNAQELBQADggEBAFqopUNc4+VfZz1m dPydZkK0du8uG94LEdPqs9gcmER0M0CBSdc4fAztmG6Z4ouwFjtP1vnjyNNNWzdH jACTFumPQqCHJ+BD8nBARIq5uATsTeGZ0WcHWuTQck/Lpu/YMaiJIUf6/CIC4sWd jPB9eSOkkJpP69fvznK7dKEvy9r/+ZQ8JOQJgbiUg1T0O+6t9DZujY2lVJIkmUZ2 PvnxXHSzETgFWVegUAjYkDK2hbMaE+qkz1MtGoCCXb4n5opoEIKiIOsb8Z87ZHRw Iw5+h3MxIezlKawdStsTN5hCbUHGEsU9IU9eZdnMFwPimtPJ9MV1mxwwB8J6wdM0 s9E7IrI= -----END CERTIFICATE-----Generated at Fri Feb 20 01:32:32 2026 by rpki-client